CVE-2009-2337

The CVE-2009-2337 issue affects the w3b|cms Gaestebuch Guestbook Module 3.0.0, where a SQL injection vulnerability exists in includes/module/book/index.inc.php. The underlying cause is an unparameterized SQL query that can be exploited when magic_quotes_gpc is disabled, enabling remote attackers ...